Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14c8aabb-d422-3061-bd01-1766ef8c5e42.roa
File:                     14c8aabb-d422-3061-bd01-1766ef8c5e42.roa (raw, json)
Hash identifier:          lMvJw9RozAI2zXIbeICPBubF/5eSJvvtPVtCA89HDXk=
Subject key identifier:   B1:8E:42:33:63:04:3C:9B:D9:04:DA:B0:A8:B6:E8:FD:63:68:82:FB
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F268D071DB6A31FE871597000
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14c8aabb-d422-3061-bd01-1766ef8c5e42.roa
Signing time:             Sat 12 Sep 2026 13:00:13 +0000
ROA not before:           Sat 12 Sep 2026 13:00:13 +0000
ROA not after:            Fri 11 Dec 2026 14:00:13 +0000
asID:                     852
IP address blocks:        173.182.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:26:8d:07:1d:b6:a3:1f:e8:71:59:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 12 13:00:13 2026 GMT
            Not After : Dec 11 14:00:13 2026 GMT
        Subject: CN=bd54d586-6d88-40d0-8309-3e138834ba3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ea:b1:82:e6:00:16:06:8b:e9:e8:ca:a9:b9:
                    f4:11:14:60:6d:c7:d2:38:cc:2b:04:38:d5:c8:88:
                    29:c9:a0:65:a4:3a:49:a2:2d:74:75:3c:b7:1c:4c:
                    22:c8:e0:6a:ce:78:b0:ed:08:d5:09:0a:76:9d:12:
                    d2:aa:55:1a:f4:e9:76:5b:12:de:43:72:ff:88:12:
                    a9:0b:fa:52:05:22:8e:d3:f9:e3:84:38:c9:5d:e6:
                    b5:b2:29:6e:a0:fa:1e:32:8a:33:16:20:3e:d3:1c:
                    2c:5b:48:10:aa:b3:d9:25:a9:c2:a0:96:79:75:16:
                    18:fd:48:51:a4:60:e9:95:e4:16:75:34:ca:69:9b:
                    1a:30:f2:5d:5b:8f:fa:9e:63:68:01:01:80:c6:b2:
                    81:bc:ef:79:c9:3e:01:45:6a:b9:e6:e7:14:6f:0f:
                    eb:43:d7:38:4d:dd:53:c4:78:89:29:79:c2:f0:31:
                    7c:0f:2d:48:64:ac:e5:e7:e8:0d:35:3a:f9:07:f6:
                    a8:6a:e3:71:1c:44:15:1a:9a:a2:0e:49:c1:54:3e:
                    1a:36:76:8e:c4:ca:12:20:64:81:f4:24:ec:60:9b:
                    1b:80:bd:4b:25:c9:45:ae:40:f4:80:07:db:78:19:
                    e8:78:b4:a8:56:1c:e6:34:4a:9b:39:b3:31:18:3d:
                    72:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8E:42:33:63:04:3C:9B:D9:04:DA:B0:A8:B6:E8:FD:63:68:82:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14c8aabb-d422-3061-bd01-1766ef8c5e42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.182.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:e4:46:41:77:9a:12:e9:19:8e:1d:d6:2e:cd:87:7c:26:1c:
         30:2a:52:d5:8e:17:24:3b:c2:79:a2:52:85:70:ba:c6:2e:aa:
         69:dd:de:19:e2:d5:2f:bf:88:65:f5:35:5d:ee:53:cd:0f:9f:
         65:37:55:c5:e8:06:b7:66:ca:26:ae:24:03:0f:9a:59:dd:61:
         35:3b:2f:d7:d1:96:34:c8:21:32:e1:43:29:72:97:4d:de:8b:
         30:27:e1:ee:05:e6:7d:78:73:26:76:81:d8:ca:40:9b:59:b2:
         42:43:4f:43:61:b4:de:2c:26:a7:23:72:67:fd:23:8a:e8:93:
         67:88:64:c0:df:19:cc:7e:db:c3:9e:3b:c2:1d:b8:6d:71:33:
         4a:73:c5:3f:d4:b4:82:93:49:7d:a1:29:4f:88:0c:f5:2d:32:
         9e:ac:3a:6b:d2:2b:6c:de:4c:ff:99:74:fe:6d:a6:bc:6a:38:
         2a:14:63:d0:b1:27:51:e5:24:ef:20:a0:d9:c6:9d:8e:c2:2c:
         63:4b:3f:dc:ea:f4:00:eb:2c:82:4a:5e:6d:49:52:50:76:3d:
         49:c5:68:23:9c:b9:ac:41:e3:60:d9:32:49:ca:06:79:52:60:
         bc:37:0f:e6:d4:5a:f9:4d:30:7a:a5:42:e8:65:a8:82:47:e2:
         dc:33:e5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 21:54:47 2026 by rpki-client